Vulnerabilities

TI-2023-03719 CVE-2023-4005 · GHSA-vq32-qxmx-986v

Insufficient Session Expiration in fossbilling/fossbilling

HIGH 75

Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00482 Published 2023-07-31 Fixed in 0.5.5 CWE-613

TI-2023-03330 CVE-2023-3568 · GHSA-gh5w-4mrm-4p4c

Open Redirect in alextselegidis/easyappointments

MEDIUM 61

Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00434 Published 2023-07-10 Fixed in 1.5.0 CWE-601

TI-2023-03286 CVE-2023-3521 · GHSA-f2hf-p7mp-7x9v

Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

MEDIUM 60

Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00919 Published 2023-07-06 Fixed in 0.5.4 CWE-79

TI-2023-03261 CVE-2023-3493 · GHSA-89x9-gx7c-5q2m

Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

HIGH 70

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00526 Published 2023-06-30 Fixed in 0.5.3 CWE-1236

TI-2023-03259 CVE-2023-3491 · GHSA-99qp-9hmr-6jgh

Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling

HIGH 73

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00889 Published 2023-06-30 Fixed in 0.5.3 CWE-434

TI-2023-03258 CVE-2023-3490 · GHSA-fx9p-2h37-fpg7

SQL Injection in fossbilling/fossbilling

HIGH 82

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2023-06-30 Fixed in 0.5.3 CWE-89

TI-2023-03174 CVE-2023-3394 · GHSA-wcv8-5j5x-hwh5

Session Fixation in fossbilling/fossbilling

MEDIUM 60

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00506 Published 2023-06-23 Fixed in 0.5.1 CWE-384

TI-2023-03173 CVE-2023-3393 · GHSA-82v3-wffx-3hq8

Code Injection in fossbilling/fossbilling

HIGH 67

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01034 Published 2023-06-23 Fixed in 0.5.1 CWE-94

TI-2023-03026 CVE-2023-3230 · GHSA-jj4r-r265-w7q9

Missing Authorization in fossbilling/fossbilling

LOW 33

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2023-06-14 Fixed in 0.5.0 CWE-862

TI-2023-03025 CVE-2023-3229 · GHSA-98cp-876f-vj6g

Business Logic Errors in fossbilling/fossbilling

LOW 29

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00509 Published 2023-06-14 Fixed in 0.5.0 CWE-840

TI-2023-03024 CVE-2023-3228 · GHSA-rphw-6wgr-jfrf

Business Logic Errors in fossbilling/fossbilling

MEDIUM 59

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00476 Published 2023-06-14 Fixed in 0.5.0 CWE-840

TI-2023-03023 CVE-2023-3227 · GHSA-hqwv-qhhm-qq2g

Insufficient Granularity of Access Control in fossbilling/fossbilling

LOW 26

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00407 Published 2023-06-14 Fixed in 0.5.0 CWE-1220

Vulnerabilities

Filters